Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 11, 2026, 10 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
246111	7.5	危険	dazzlindonna	-	PostEcards の sendcard.cfm における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-5559	2012-06-26 16:03	2008-12-15	Show	GitHub Exploit DB Packet Storm

246112	4.3	警告	Digium	-	Asterisk Open Source におけるサービス運用妨害 (DoS) の脆弱性	CWE-287 不適切な認証	CVE-2008-5558	2012-06-26 16:03	2008-12-17	Show	GitHub Exploit DB Packet Storm

246113	9.3	危険	ESET マイクロソフト	-	ESet NOD32 Antivirus における HTML 文書内のマルウェアの検知を回避される脆弱性	CWE-20 不適切な入力確認	CVE-2008-5534	2012-06-26 16:03	2008-12-12	Show	GitHub Exploit DB Packet Storm

246114	9.3	危険	フォーティネットマイクロソフト	-	Fortinet Antivirus における HTML 文書内のマルウェアの検知を回避される脆弱性	CWE-20 不適切な入力確認	CVE-2008-5531	2012-06-26 16:03	2008-12-12	Show	GitHub Exploit DB Packet Storm

246115	9.3	危険	マイクロソフト AVG Technologies	-	Ewido Security Suite における HTML ドキュメント内のマルウェアの検出を回避される脆弱性	CWE-20 不適切な入力確認	CVE-2008-5530	2012-06-26 16:03	2008-12-12	Show	GitHub Exploit DB Packet Storm

246116	9.3	危険	マイクロソフトアラジン	-	Aladdin eSafe における HTML 文書のマルウェアの検出を回避される脆弱性	CWE-20 不適切な入力確認	CVE-2008-5528	2012-06-26 16:03	2008-12-12	Show	GitHub Exploit DB Packet Storm

246117	9.3	危険	ESET マイクロソフト	-	ESET Smart Security における HTML 文書内のマルウェアの検知を回避される脆弱性	CWE-20 不適切な入力確認	CVE-2008-5527	2012-06-26 16:03	2008-12-12	Show	GitHub Exploit DB Packet Storm

246118	9.3	危険	マイクロソフト Doctor Web	-	DrWeb Anti-virus における HTML 文書のマルウェアの検知が回避される脆弱性	CWE-20 不適切な入力確認	CVE-2008-5526	2012-06-26 16:03	2008-12-12	Show	GitHub Exploit DB Packet Storm

246119	9.3	危険	マイクロソフト ClamAV	-	ClamAV における HTML ドキュメント内のマルウェアの検出を回避される脆弱性	CWE-20 不適切な入力確認	CVE-2008-5525	2012-06-26 16:03	2008-12-12	Show	GitHub Exploit DB Packet Storm

246120	9.3	危険	マイクロソフト AVAST Software s.r.o.	-	avast! antivirus における HTML ドキュメント内のマルウェアの検出を回避される脆弱性	CWE-20 不適切な入力確認	CVE-2008-5523	2012-06-26 16:03	2008-12-12	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 11, 2026, 5:13 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
219601	8.8	HIGH Adjacent	universal-robots	ur_software	CB3 SW Version 3.3 and upwards, e-series SW Version 5.0 and upwards allow authenticated access to the RTDE (Real-Time Data Exchange) interface on port 30004 which allows setting registers, the speed …	CWE-306 Missing Authentication for Critical Function	CVE-2020-10264	2024-11-21 13:55	2020-04-6	Show	GitHub Exploit DB Packet Storm

219602	7.8	HIGH Local	visam	vbase_editor vbase_web-remote	VISAM VBASE Editor version 11.5.0.2 and VBASE Web-Remote Module allow weak hashing algorithm and insecure permissions which may allow a local attacker to bypass the password-protected mechanism throu…	CWE-327 Use of a Broken or Risky Cryptographic Algorithm	CVE-2020-10601	2024-11-21 13:55	2020-04-4	Show	GitHub Exploit DB Packet Storm

219603	9.8	CRITICAL Network	visam	vbase_web-remote vbase_editor	VISAM VBASE Editor version 11.5.0.2 and VBASE Web-Remote Module may allow a vulnerable ActiveX component to be exploited resulting in a buffer overflow, which may lead to a denial-of-service conditio…	CWE-120 Classic Buffer Overflow	CVE-2020-10599	2024-11-21 13:55	2020-04-4	Show	GitHub Exploit DB Packet Storm

219604	6.8	MEDIUM Adjacent	eclipse	che	A flaw was found in the Eclipse Che up to version 7.8.x, where it did not properly restrict access to workspace pods. An authenticated user can exploit this flaw to bypass JWT proxy and gain access t…	NVD-CWE-Other	CVE-2020-10689	2024-11-21 13:55	2020-04-4	Show	GitHub Exploit DB Packet Storm

219605	9.8	CRITICAL Network	starface	unified_communication_\&_collaboration_client	STARFACE UCC Client before 6.7.1.204 on WIndows allows binary planting to execute code with System rights, aka usd-2020-0006.	CWE-427 Uncontrolled Search Path Element	CVE-2020-10515	2024-11-21 13:55	2020-04-3	Show	GitHub Exploit DB Packet Storm

219606	6.1	MEDIUM Physics	bd	pyxis_medstation_es_firmware pyxis_anesthesia_station_es_firmware	In BD Pyxis MedStation ES System v1.6.1 and Pyxis Anesthesia (PAS) ES System v1.6.1, a restricted desktop environment escape vulnerability exists in the kiosk mode functionality of affected devices. …	NVD-CWE-Other	CVE-2020-10598	2024-11-21 13:55	2020-04-2	Show	GitHub Exploit DB Packet Storm

219607	7.5	HIGH Network	tp-link	nc450_firmware nc260_firmware nc250_firmware nc230_firmware nc220_firmware nc210_firmware nc200_firmware	TP-Link NC200 through 2.1.8_Build_171109, NC210 through 1.0.9_Build_171214, NC220 through 1.3.0_Build_180105, NC230 through 1.3.0_Build_171205, NC250 through 1.3.0_Build_171205, NC260 through 1.5.1_B…	CWE-476 NULL Pointer Dereference	CVE-2020-10231	2024-11-21 13:55	2020-04-1	Show	GitHub Exploit DB Packet Storm

219608	8.8	HIGH Network	buildah_project redhat	buildah enterprise_linux openshift_container_platform	A path traversal flaw was found in Buildah in versions before 1.14.5. This flaw allows an attacker to trick a user into building a malicious container image hosted on an HTTP(s) server and then write…	CWE-22 Path Traversal	CVE-2020-10696	2024-11-21 13:55	2020-04-1	Show	GitHub Exploit DB Packet Storm

219609	9.8	CRITICAL Network	pam-krb5_project debian	pam-krb5 debian_linux	pam-krb5 before 4.9 has a buffer overflow that might cause remote code execution in situations involving supplemental prompting by a Kerberos library. It may overflow a buffer provided by the underly…	CWE-120 Classic Buffer Overflow	CVE-2020-10595	2024-11-21 13:55	2020-03-31	Show	GitHub Exploit DB Packet Storm

219610	9.8	CRITICAL Network	paessler	prtg_network_monitor	A webserver component in Paessler PRTG Network Monitor 19.2.50 to PRTG 20.1.56 allows unauthenticated remote command execution via a crafted POST request or the what parameter of the screenshot funct…	CWE-20 Improper Input Validation	CVE-2020-10374	2024-11-21 13:55	2020-03-31	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed